Bisq & RoboSats: The P2P Trading Perimeters and the Logic of the Sovereign Exchange

You go to move your own Bitcoin off the exchange and a banner stops you: withdrawals temporarily disabled. No reason. No timeline. You refresh, you email support, you read a help article that explains nothing. And in that quiet, sinking moment you understand something you had been told was paranoid — the coins were never really in your hands. They were a number in a company’s database, and the company just decided you couldn’t touch it today. That feeling, the one where your money is suddenly a permission you have to ask for, is the exact thing peer-to-peer exchanges were built to end.

The short version: Bisq and RoboSats are non-custodial, peer-to-peer Bitcoin exchanges that let you swap fiat for Bitcoin without handing custody to a company. Bisq runs as open-source software on your own machine, routes over Tor, and locks trades in 2-of-2 multi-signature escrow that neither side can move alone. RoboSats works over Tor in a browser and uses the Lightning Network with “hold invoices” for faster, smaller trades and a fresh throwaway identity each time. Neither can freeze your account, because there is no account — only a protocol. They are slower and have thinner liquidity than Coinbase or Binance, and they do not exempt you from tax law. What they remove is the single point of control that lets an intermediary freeze, reverse, or surveil your trades.

Why can a centralized exchange freeze your money?

You have been taught that liquidity needs a central authority — you trade on a big exchange because “that’s where the volume is.” The trade-off hidden inside that convenience is control. When your coins sit on a centralized exchange, you hold an IOU on their database, not the asset itself. They can pause withdrawals, close your account, or hand your full trading history to a third party, and your only recourse is a support ticket.

There is a quieter cost too. Every trade on a centralized platform is logged against your verified identity, potentially forever. That record can be requested, subpoenaed, leaked in a data incident, or sold. The problem was never that an exchange charges a fee — it is that an exchange holds a switch, and the switch is wired to your money.

The escape is a protocol-based exchange where you hold the keys and your counterparty has no power over your funds. That is the whole reframe: you stop being a customer who can be cut off and become a peer in a network that has no off switch for you.

What makes Bisq different? The Tor-native node model

Bisq is not a website or a company you sign up with. It is open-source software that turns your own computer into an exchange node. The architecture is the point:

• Local software. Bisq runs on your machine, not on someone’s server.
• Tor transit. Peer discovery and chat happen over Tor, so your IP address stays hidden from observers.
• 2-of-2 multi-signature escrow. The Bitcoin sits in an address that needs both your signature and your counterparty’s to move. Neither side can grab it unilaterally.
• Direct fiat settlement. You send the bank transfer straight to your peer, they confirm receipt in the encrypted Bisq chat, and the Bitcoin releases from escrow.

There is no company to sue, no central server to data incident, no account to freeze. If a dispute arises — which is uncommon — a randomly assigned arbitrator from a community pool reviews the encrypted chat and evidence and decides. No corporate help desk sits between you and your money, which is exactly why no corporate help desk can take it.

What makes RoboSats different? The Lightning-native transient model

RoboSats trades speed and anonymity for a different escrow design. Instead of on-chain multi-sig, it uses the Lightning Network and a mechanism called a “hold invoice.”

• Robot identities. You do not create an account. Each session generates a random “robot” avatar from a seed phrase, so there is nothing persistent to track across trades.
• Lightning settlement. Trades clear in seconds over Lightning rather than waiting on on-chain confirmations.
• Hold-invoice escrow. The seller locks funds in a hold invoice until the buyer confirms the fiat payment, so the buyer cannot claim the Bitcoin without paying and the seller cannot vanish with both.
• No account state. Generate a new robot next time and there is no thread linking your trades together unless you choose to reuse a seed.

Use RoboSats for smaller, faster trades with minimal footprint. Reach for Bisq when the amount is larger and you would rather hold on-chain Bitcoin and accept the slower one-to-two-hour settlement in exchange for that.

How do P2P exchanges protect your privacy?

Both platforms mask your IP through Tor, which stops an ISP, network observer, or platform operator from tying your connection to a specific trade or building a pattern over time. Both also wall off your banking details: on Bisq, your account number is shared only with the single peer you are trading with, encrypted in the chat, and Bisq itself never sees it; RoboSats avoids fiat account details on the platform entirely by settling over Lightning.

One rule carries real weight here. Choose fiat methods that cannot be reversed — favour final transfers like SEPA or domestic bank transfers and avoid credit cards, because chargebacks are the main way scammers misuse P2P trades. A payment that can be clawed back after the Bitcoin is released is the one opening you should never give.

How to use Bisq: a practical walkthrough

1. Install and connect. Download Bisq from bisq.network onto a hardened desktop (Linux is preferable). Pointing it at your own Bitcoin node is the most private setup; the first sync can take an hour or two.
2. Fund a security deposit. Bisq asks both sides to post a refundable security deposit — historically around 15% of the trade, subject to caps — from a non-custodial wallet you already control. This is what keeps both parties honest. Confirm current figures in the app, as they change.
3. Browse and take an offer. Filter offers by payment method, currency, and price, then take one. Bisq sets up the 2-of-2 escrow address and both parties sign in.
4. Send fiat, confirm, release. You send the bank transfer to the seller’s details from the encrypted chat, they confirm receipt, and the Bitcoin releases from escrow to your address. Bisq never touches the coins.

How to use RoboSats: a practical walkthrough

1. Open over Tor. Use Tor Browser to reach the RoboSats onion address. There is no signup.
2. Generate a robot. RoboSats creates a random robot avatar and a seed phrase — save the seed, it is your identity for this session only.
3. Create or take an order. Set price, amount, and payment method, or take an existing order. The hold invoice is created instantly.
4. Execute and settle. Chat encrypted, one side sends fiat, the other confirms receipt, and Lightning settles in seconds. Want to trade again with no link to the last one? Generate a fresh robot.

The honest trade-off: friction and risk for control

P2P trading is genuinely slower and thinner than a centralized exchange. A large Bisq trade can take a couple of hours to find a counterparty, and you wait on a human to confirm fiat receipt rather than getting an instant fill. There is also real counterparty risk: you are trading with a stranger, and while escrow and arbitration are designed to contain fraud, they do not erase it.

This is the genuine decision, stated plainly: instant convenience with a permanent identity-linked record, versus a slower trade that no intermediary can freeze or reverse. Most people who choose P2P do so not to hide from the law — you still owe tax on your gains — but because they would rather not route their entire financial life through a single company’s switch. Be honest with yourself about which trade-off you actually need before you start.

How does dispute resolution work without a company?

The obvious worry is “what if the seller takes my fiat and never releases the Bitcoin?” Bisq answers this with decentralized arbitration. Raise a dispute and a random arbitrator is assigned from a rotating pool of community members who have staked BSQ, the Bisq DAO token, to earn fees. They review the encrypted chat and any evidence and rule — awarding the Bitcoin to one side or splitting it. Because arbitrators rotate randomly and can lose their stake for acting in bad faith, the incentive is to judge fairly. RoboSats uses a comparable rotating-arbitrator model plus a reputation score, where robots with a track record of clean trades match more easily.

In practice, most fraud is prevented before it starts by checking reputation — never trade with a counterparty who has zero history or negative feedback. The escrow design means a scammer usually cannot get the Bitcoin released without your cooperation in the first place.

Where P2P trading fits in a self-custody setup

Peer-to-peer acquisition is one node in a larger, deliberate financial setup rather than the whole thing:

• Entry. Acquire Bitcoin non-custodially through Bisq or RoboSats instead of a KYC exchange.
• Storage. Move it into a hardened hardware wallet or multi-signature cold storage you control.
• Privacy hygiene. Understand the broader picture with your own Monero node and the trade-offs of on-chain privacy tools.
• Custody hardware. Pair it with a signing device — our Ledger Stax review covers the E-ink custody approach.

The goal of the loop is simple: no single institution holds a complete, freezable map of your money.

Frequently asked questions

Is it legal to use Bisq or RoboSats?
In most jurisdictions, yes — trading Bitcoin peer-to-peer is legal, and you are dealing directly with another person rather than running an unlicensed business. Crucially, this does not exempt you from tax: you are still legally required to report capital gains to your tax authority. P2P exchanges remove KYC surveillance, not your tax obligations. Check the rules where you live, because some countries regulate even private crypto trading.

What if my counterparty is a scammer?
Check their reputation before you trade — dispute history and feedback on Bisq, robot rating and completed-trade count on RoboSats — and never trade with someone who has no history. If a dispute does arise, the arbitration protocol resolves it, and the escrow design means a scammer typically cannot release the Bitcoin without your approval. The non-reversible fiat rule matters here too: avoid any payment method that allows chargebacks.

Can I use Bisq on a mobile phone?
Bisq is desktop-only and works best with a synced Bitcoin node, which needs real storage and bandwidth. RoboSats runs in Tor Browser, including on a phone, though a hardened desktop is more secure. Other P2P options like Hodl Hodl exist for mobile, but treat any setup holding real value as something worth doing on a proper machine.

Which is better, Bisq or RoboSats?
Bisq suits larger trades where you want on-chain Bitcoin custody and can accept slower settlement. RoboSats suits speed, throwaway identity, and smaller amounts over Lightning. Many people use both and pick per trade based on size and patience.

What does it cost to trade on Bisq or RoboSats?
Both charge small trading fees plus the relevant network fees — Bisq’s are reduced if you hold BSQ, and you also pay a Bitcoin miner fee for the escrow transaction; RoboSats charges a small percentage fee plus Lightning routing costs. Exact rates change, so check the current schedule in each app rather than trusting a fixed number.

You came here because of that sinking moment — the withdrawal that wouldn’t go through, the realisation that “your” money answered to someone else’s switch. That instinct was not paranoia; it was accurate. The fix is not a louder complaint to support. It is moving the part of your money that matters onto rails with no switch to flip, accepting the slower trade and the homework that comes with real custody, and learning to be a peer in a protocol instead of a customer who can be cut off. It takes an afternoon to set up and a little discipline to use well. Do that, and the next time an exchange freezes withdrawals, the headline is about other people. You are already sovereign over the coins that count — holding keys, not permissions.